Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          L7lQ+3ONbJAF1KNhhAX3rk/4bKGWjwpTmfTEBUSH9nY=
Subject key identifier:   BA:29:84:A4:39:A7:F4:92:EE:82:83:40:6B:4E:7A:37:D6:43:3F:DC
Certificate issuer:       /CN=F4315E00F295861C1ED30C06EA1C17530762630E
Certificate serial:       6F1326C4549A89306A66C72ED1CD5D0065794F6A
Authority key identifier: F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 17 Sep 2026 21:26:01 +0000
ROA not before:           Thu 17 Sep 2026 21:21:01 +0000
ROA not after:            Thu 16 Sep 2027 21:26:01 +0000
asID:                     270778
IP address blocks:        187.63.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:13:26:c4:54:9a:89:30:6a:66:c7:2e:d1:cd:5d:00:65:79:4f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4315E00F295861C1ED30C06EA1C17530762630E
        Validity
            Not Before: Sep 17 21:21:01 2026 GMT
            Not After : Sep 16 21:26:01 2027 GMT
        Subject: CN=BA2984A439A7F492EE8283406B4E7A37D6433FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:ac:ae:48:2f:b7:1c:ef:b1:c0:b3:06:b8:
                    70:05:92:ba:8d:0d:ad:df:11:c6:8a:59:c4:7d:d2:
                    86:c9:6c:c1:83:1b:43:dc:99:63:e2:53:2c:cd:43:
                    5b:f1:f6:d1:eb:8d:62:f4:02:b4:e5:15:6a:49:7a:
                    9c:6c:31:98:99:7f:49:4e:06:4f:7a:e5:6a:70:a6:
                    aa:df:d9:c4:93:fd:95:7e:7d:a1:bc:51:3f:8b:7d:
                    1c:dc:33:57:7c:8f:9f:94:c9:6b:ac:69:4a:91:6f:
                    38:ac:48:65:c7:b9:55:e9:22:ce:6f:4a:6a:7e:b7:
                    70:4b:14:6f:32:52:26:56:42:38:d0:2b:95:03:fb:
                    12:e3:23:8b:b1:ec:c6:fa:d2:9a:6b:8c:10:28:d4:
                    c6:3f:b7:8c:9c:c9:f3:fb:10:65:d2:00:90:23:47:
                    84:98:59:03:1e:dc:c5:91:e1:6c:f4:e7:a0:7a:2a:
                    4b:5e:22:47:48:24:9d:e7:9f:ee:d0:c2:1c:4a:71:
                    12:8b:2d:54:8a:d9:57:96:fd:11:3b:aa:a9:8d:fe:
                    04:df:91:dd:1b:d2:bd:46:3a:00:39:ae:6e:d0:7a:
                    58:79:92:65:d7:c3:9a:ff:75:1a:b7:54:9b:67:fa:
                    c4:13:49:da:6d:74:3d:e7:04:84:6e:5c:7d:32:90:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:84:A4:39:A7:F4:92:EE:82:83:40:6B:4E:7A:37:D6:43:3F:DC
            X509v3 Authority Key Identifier:
                keyid:F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:15:96:a0:fc:a1:e1:32:92:97:f0:f5:34:74:b3:6e:61:69:
         31:b2:f9:3b:e6:75:93:39:b6:82:50:02:be:10:7b:6e:69:87:
         76:61:21:9b:bb:96:be:ad:ed:f8:2e:b2:02:2a:ad:57:6f:f6:
         bb:5c:ae:8a:4e:d7:34:c5:48:01:10:dc:c6:50:ab:82:cf:7f:
         5a:38:bd:0e:5e:a8:0f:5d:f2:22:d6:b7:9e:d4:36:16:4d:db:
         23:36:82:61:95:b0:f9:89:88:aa:61:c4:35:3c:cc:a7:3a:89:
         ea:64:85:9d:4d:5f:67:1c:b5:db:cb:98:13:7a:a6:15:d0:fa:
         dc:4e:46:bb:43:fa:01:6b:7b:6e:54:27:2c:bc:be:a7:7a:8c:
         61:e0:c9:54:e1:ec:06:29:3f:94:22:56:e4:72:4f:41:27:6c:
         8c:dd:d5:4e:90:53:82:cc:dc:d2:d5:49:2f:b4:9d:00:57:31:
         b7:32:67:fc:83:49:c7:53:13:26:75:53:06:1c:aa:2b:a1:f0:
         7c:f8:9f:50:d0:ac:ae:ec:39:09:19:67:2a:d2:24:c2:5e:c6:
         be:07:6c:fd:5e:15:4f:e2:fc:ba:36:06:1f:4f:cb:77:35:e5:
         56:4e:89:cb:b5:bd:7e:e0:31:ae:08:16:44:02:e5:6c:d1:c1:
         2a:fe:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----